Matt Hills
2b471ef09f
This update introduces an AUTH_MODE configuration that allows developers to easily test the application locally without requiring Entra ID setup. Changes: - Add AUTH_MODE environment variable (entra/none) to .env.example and config - Update auth decorators to support both authentication modes - Create role selection page for no-auth mode (admin/user choice) - Modify auth routes to conditionally use MSAL only in Entra ID mode - Update UserModel to support mock test users with string IDs - Add visual indicator in navbar when running in no-auth mode Benefits: - Zero Azure AD configuration needed for local development - Quick testing of role-based features (admin vs user) - Existing Entra ID functionality remains unchanged - Simple toggle via environment variable To use no-auth mode, set AUTH_MODE=none in .env file. For production, use AUTH_MODE=entra (default).
29 lines
963 B
Plaintext
29 lines
963 B
Plaintext
# Flask Configuration
|
|
SECRET_KEY=your-secret-key-change-this-in-production
|
|
FLASK_DEBUG=1
|
|
|
|
# Authentication Mode
|
|
# Options: 'entra' (Entra ID/Azure AD) or 'none' (no authentication for local testing)
|
|
AUTH_MODE=none
|
|
|
|
# Entra ID (Azure AD) Configuration
|
|
# Get these values from your Azure Portal > App Registrations
|
|
AZURE_CLIENT_ID=your-client-id-here
|
|
AZURE_CLIENT_SECRET=your-client-secret-here
|
|
AZURE_TENANT_ID=your-tenant-id-here
|
|
|
|
# Redirect URI - Update this to match your deployment URL
|
|
# For local development: http://localhost:5555/auth/callback
|
|
# For production: https://yourdomain.com/auth/callback
|
|
REDIRECT_URI=http://localhost:5555/auth/callback
|
|
|
|
# Azure AD Authority URL (usually don't need to change this)
|
|
AUTHORITY=https://login.microsoftonline.com/
|
|
|
|
# Scopes for Microsoft Graph API (to get user info)
|
|
SCOPE=User.Read
|
|
|
|
# Application Settings
|
|
# Default admin email (this user will have admin role automatically)
|
|
DEFAULT_ADMIN_EMAIL=admin@yourdomain.com
|